• ×
    Information
    Need Windows 11 help?
    Check documents on compatibility, FAQs, upgrade information and available fixes.
    Windows 11 Support Center.
  • post a message
  • ×
    Information
    Need Windows 11 help?
    Check documents on compatibility, FAQs, upgrade information and available fixes.
    Windows 11 Support Center.
  • post a message
Guidelines
Are you having HotKey issues? Click here for tips and tricks.
HP Recommended
All Gen8+ Probooks/Elitebooks
Microsoft Windows 11

We have a fleet of HP Probooks/Elitebooks running fully patched Windows 10 22H2 Enterprise with the mitigations referenced in KB5025885 employed.  ANY of these devices we upgrade via Windows 11 22h2 Feature updates BSOD with error code 0Xc4000028.  The only way to get them to boot is to disable secure boot in the bios.   We have tried the recovery steps listed in the KB (recopying the boot manager and policy file to the EFI partition) without success.  We have tried resetting the entire bios and enabling secure boot. and still the same BSOD.  We suspect the culprit is HP Sure Boot key protection, however machine still doesn't boot with this disabled.

 

This is a huge and replicable issue that also renders HP's entire system recovery function defunct, since the recobery environment does not contain the patches.  Is there any guidance from HP on how to handle this?

† The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the <a href="https://www8.hp.com/us/en/terms-of-use.html" class="udrlinesmall">Terms of Use</a> and <a href="/t5/custom/page/page-id/hp.rulespage" class="udrlinesmall"> Rules of Participation</a>.